add note about localhost interfaces
add blacklisting to web interface